- NANOG - lists.nanog.org

the great anti-virus conspiracy
by Paul Vixie 03 Feb '06

03 Feb '06

today i saw <http://209.59.135.198/threat-center/eset_threat_blog.php>.

1 0

Re: Modelling a large ISP network with C-BGP
by Gregory Hicks 02 Feb '06

02 Feb '06

> Cc: nanog(a)nanog.org > From: Christian Kuhtz <kuhtzch(a)corp.earthlink.net> > Subject: Re: Modelling a large ISP network with C-BGP > Date: Thu, 2 Feb 2006 17:19:50 -0500 > To: Gregory Hicks <ghicks> > > > On Feb 2, 2006, at 5:02 PM, Gregory Hicks wrote: > > > > >> From: Christian Kuhtz <kuhtzch(a)corp.earthlink.net> > >> Date: Thu, 2 Feb 2006 15:38:57 -0500 > >> > >> On Feb 2, 2006, at 3:34 PM, Alain Hebert wrote: > >>> > >>> I fail to see a usage for smaller ISP that are using BGP only > >>> for peering and OSPF internaly. > >> > >> Why would you need to sim this at small scale? > > > > How about for a net that has 540+ networks? It would be > > interesting to see what happens if you perturb this BEFORE you do > > the perturbation... > > *sigh* > > You just made me speechless. All I can come with is "Well, DUH!" Christian: Honestly, I didn't *mean* to make you speechless! It just happened... What I *meant* to write was ... 540+ SUBnets. We have several /16 addresses and some 35K hosts right now - but still growing... All this is hiding behind one AS... (used to be three ASes) > > *sigh* > ------------------------------------------------------------------- I am perfectly capable of learning from my mistakes. I will surely learn a great deal today. "A democracy is a sheep and two wolves deciding on what to have for lunch. Freedom is a well armed sheep contesting the results of the decision." - Benjamin Franklin "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton

1 0

Re: Modelling a large ISP network with C-BGP
by Gregory Hicks 02 Feb '06

02 Feb '06

> From: Christian Kuhtz <kuhtzch(a)corp.earthlink.net> > Date: Thu, 2 Feb 2006 15:38:57 -0500 > > On Feb 2, 2006, at 3:34 PM, Alain Hebert wrote: > > > > I fail to see a usage for smaller ISP that are using BGP only > > for peering and OSPF internaly. > > Why would you need to sim this at small scale? How about for a net that has 540+ networks? It would be interesting to see what happens if you perturb this BEFORE you do the perturbation... > > Thanks, > Christian > ------------------------------------------------------------------- Gregory Hicks | Principal Systems Engineer Cadence Design Systems | Direct: 408.576.3609 555 River Oaks Pkwy M/S 6B1 | Fax: 408.894.3400 San Jose, CA 95134 | Internet: ghicks(a)cadence.com I am perfectly capable of learning from my mistakes. I will surely learn a great deal today. "A democracy is a sheep and two wolves deciding on what to have for lunch. Freedom is a well armed sheep contesting the results of the decision." - Benjamin Franklin "The best we can hope for concerning the people at large is that they be properly armed." --Alexander Hamilton

2 1

Re: Modelling a large ISP network with C-BGP
by Todd Underwood 02 Feb '06

02 Feb '06

Alain, On Thu, Feb 02, 2006 at 01:01:27PM -0500, Alain Hebert wrote: > > I'm I alone to find this a bit spammy? It's a free tool that imports real router configs and apparently can scale to simulate very large networks. That seems --operational --useful --noncommercial seems right on-target to me. for the record, renesys wrote the ssfnet (ssfnet.org) simulation framework, so we respect people who do a good job of producing high-quality simulation engines. it is most certainly not easy and if this release is any good, i suspect it will be appreciated by those networks large enough to still have a R&D staff to take advantage of it. t. -- _____________________________________________________________________ todd underwood chief of operations & security renesys - internet intelligence todd(a)renesys.com www.renesys.com

1 0

74/8 75/8 76/8
by Martin Hannigan 02 Feb '06

02 Feb '06

74/8, 75/8, and 76/8 These /20's out of ASN 36666 Cymru Testing: 74.63.0.0/20 75.127.0.0/20 76.191.0.0/20 ...should be withdrawn now. Allocation out of 74/8 happened on 12/20/2005 and 76/8 1/19/2006. Operationally, the testing should stop prior to allocations from the block, regardless of size. I think it's a binary question, they're either in production or not, and if they are, there should be no intrusive testing. Best, -M< -- Martin Hannigan (c) 617-388-2663 Renesys Corporation (w) 617-395-8574 Member of the Technical Staff Network Operations hannigan(a)renesys.com

6 8

CME-24/BlackWorm email notifications + top-7 unreachable AS's
by Gadi Evron 01 Feb '06

01 Feb '06

Below are the top-7 ASN's that *we* have not been able to reach with our email notifications of CME-24/BlackWorm infected machines: 5416 | BATELCO-BH 6412 | KW Gulfnet International 8781 | QA-ISP Qatar Telecom (Q-Tel) 10029 | SPECTRANET FIRST FIBRE BROADBA 12486 | Teleyemen - YNET Autonomous Nu 20759 | ISU-JED KACST/ISU Jeddah Auton 34105 | ARIAVESATCOM-AS Ariave Satcom If you know of a contact for these or did not receive a notification and would like to make sure your network is clean, please contact me off list. Thanks, Gadi.

5 6

RE: McDonalds contact also.
by Brian Johnson 01 Feb '06

01 Feb '06

That is so funny. FWIW.. I did try to contact them on-line as well as via phone with no response. Sorry for wasting so much of someones time that spmming the list impersonnating me seemed like a good idea. I should forward this to spam-l and watch the trolls come out. LOL - Brian J. > -----Original Message----- > From: Buhrmaster, Gary [mailto:gtb@slac.stanford.edu] > Sent: Tuesday, January 31, 2006 2:03 PM > To: Brian Johnson > Subject: RE: McDonalds contact also. > > > > (I could not resist responding.....) > > Sorry, you unsolicted idea will not be accepted: > > > > > Unsolicited Ideas > > Thank you for your interest to share an idea for a product or > service that you believe would be beneficial to McDonald's. > Please know, however, that it is McDonald's company's policy > not to consider unsolicited ideas from anyone other than our > corporate employees, franchise owners and dedicated suppliers. > > It's not that great ideas cannot come from our valued > customers. Each year, however, McDonald's receives thousands > of unsolicited ideas and proposals for products and services. > Due to the mass volume of these unsolicited ideas and the > business challenge of determining what is truly a "new" idea > versus a concept that is already in development, being > tested, or previously considered, we must adhere to a strict > policy not to accept or review any unsolicited ideas that > come from outside the McDonald's system of our corporate > employees, franchise owners and suppliers. > > As a result, we must decline your invitation to review your > idea, and hope you can understand and appreciate our business > reasons for making this company decision. We do, however, > greatly appreciate your interest in McDonald's. > > > > > -----Original Message----- > > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > > Behalf Of Brian Johnson > > Sent: Tuesday, January 31, 2006 6:25 AM > > To: nanog(a)merit.edu > > Subject: McDonalds contact also. > > > > > > I've got a great idea for a new cheeseburger and want someone to > > give me a contact at McDonalds. I am too lazy to find one myself, > > and don't care about wasting any of your time. > > > > Please reply off-list. > > > > Brian. > > >

5 4

Comcast contact also.
by Brian Johnson 31 Jan '06

31 Jan '06

Also looking for a Comcast contact for mail abuse issues. Please reply off-list. Brian.

3 2

Re: Word file
by Fergie 31 Jan '06

31 Jan '06

Imagine that. :-) Not to hard ro figure that one out -- last time I checked, you weren't in India. :-) [snip] X-WinProxy-AntiVirus: Removed W32/Tearec.A.worm!CMÈ [and] Received: from sys11 (unknown [202.141.22.146]) by trapdoor.merit.edu (Postfix) with SMTP id 8929591212 for <nanog(a)trapdoor.merit.edu>; Tue, 31 Jan 2006 01:25:19 -0500 (EST) [snip] [IPv4 whois information for 202.141.22.146 ] [whois.apnic.net] % [whois.apnic.net node-1] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 202.141.20.0 - 202.141.23.255 netname: ERNET-SATWAN country: IN descr: ERNET India descr: Department of Information Technology descr: Electronics Niketan descr: 6, CGO Complex descr: New Delhi - 110003 admin-c: AS384-AP tech-c: AS384-AP status: ASSIGNED NON-PORTABLE changed: apnic(a)eis.ernet.in 20040903 mnt-by: MAINT-AP-ERNET-INDIA changed: hm-changed(a)apnic.net 20040903 source: APNIC person: Anupam Srivastava nic-hdl: AS384-AP e-mail: anupam(a)eis.ernet.in address: ERNET India address: Electronics Niketan, 6 C.G.O Complex address: New Delhi-110003 address: phone: +91-11-24361329 fax-no: +91-11-24362924 country: IN changed: apnic-maintainer-alarm(a)eis.ernet.in 20041229 mnt-by: MAINT-IN-CUSTOMER-ERNET source: APNIC - ferg -- David Ulevitch <davidu(a)everydns.net> wrote: On Jan 30, 2006, at 10:25 PM, davidu wrote: > WARNING: WinProxy has detected a virus in file > attached to this e-mail message! I'm a mac/unix guy -- I promise. :-) That email did not come from me, but this one did. -david -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Word file
by davidu 31 Jan '06

31 Jan '06

Please see the file. ********************************************************** ********************************************************** WARNING: WinProxy has detected a virus in file attached to this e-mail message! The attachment has been automatically removed to protect your network. WinProxy Administrator: gk_pkm(a)yahoo.com 01/31/06 11:56:02 WinProxy (Version 6.0 R1c (6.0.21.0)) - http://www.WinProxy.com/ Antivirus Vendor: Panda Software Scan Engine Version: 4.7.0.201_4.1.6.408 Pattern File Version: 3.109873 (Timestamp: 2006/01/30 17:00:31) Machine name: SYS1 Machine IP address: 202.141.22.146 Server: 198.108.1.26 Client: 192.168.0.11 Protocol: SMTP Virus: "W32/Tearec.A.worm!CM��" found! Attachment: New_Document_file.pif ********************************************************** **********************************************************

2 1